CVE-2020-11651-poc

Exploit PoC para CVE-2020-11651 y CVE-2020-11652 Este es un exploit de prueba de concepto basado en el script de verificación inicial. Úselo para verificar que ha actualizado correctamente sus servidores Salt master a una versión que contiene las correcciones necesarias. Gracias a F-Secure Labs p...

CVE-2020-11651-PoC

CVE-2020-11651-PoC 该仓库包含 CVE-2020-11651 漏洞利用代码，已更新以适配最新版本的 Python 并处理连接错误。 从原始仓库复制的 README 原始仓库 CVE-2020-11651 和 CVE-2020-11652 的 PoC 漏洞利用 这是一个基于最初检查脚本的概念验证漏洞利用。使用它来验证您是否已成功将 Salt master 服务器更新为包含必要修复的版本。 感谢 F-Secure Labs 的研究及报告。 目前，该脚本可用于在 master 及所有连接的 minion 上进行文件系统访问和调度命令。请明智地使用这些权限！ 用法...

hush

面向 AI 智能体安全规则的便携式开放规范 规范 · 文档 · 规则集 · JSON Schema HushSpec 是一种面向 AI 智能体安全规则的开放策略格式。它定义了智能体在运行时可以 执行哪些操作，包括文件系统访问、网络出口、工具使用、机密信息检测等，而不规定如何 强制执行这些控制。这种分离使策略能够跨运行时、框架和语言进行移植。 v0.1.1-alpha — 核心规范、全部四个 SDK（Rust、TypeScript、Python、Go）以及 h2h CLI 均已发布并可用。通过它们，你可以对 10 种规则类型和 3...

cve-2025-9074-poc

CVE-2025-9074 教育用 PoC・概念验证代码 本仓库包含一个用于教育目的的 PoC，演示了利用 Docker Engine 的未认证远程 API 创建可读写主机文件系统的特权容器的风险。 执行文件为 poc.go。 重要：本 PoC 仅限用于教育及防御目的。禁止在第三方环境或未经授权的系统上执行。 危险性评估 综合评估：严重 预估 CVSS v3.1 基本分：9.8 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 依据： 未认证即可访问 TCP/2375 → PR:N, UI:N, AV:N 通过特权容器 +...

cve-2024-21626

CVE-2024-21626 Resumen Este repositorio contiene ejemplos de código de una aplicación vulnerable a CVE-2024-21626, así como un gadget eBPF para detectar intentos de explotación. Este repositorio fue creado como parte de este blog post. El programa gadget utilizado para detectar esta vulnerabilida...

CVE-2026-81453

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

EUVD-2026-81618

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

CVE-2026-81453

Dell OpenManage Server Administrator (OMSA) prior to version 11.1.0.3 is affected by a Path Traversal vulnerability that allows a low-privileged attacker with remote network access to gain filesystem access on the target system. The attack requires no user interaction and has low complexity, yiel...

EUVD-2026-81607

vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries e.g. require: builtin: '', '-fs', '-childprocess' , negative entries are matched by exact module name in lib/builtin.js, so -fs removes only the built...

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

CVE-2026-81481

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Path Traversal vulnerability (improper limitation of a pathname to a restricted directory). An unauthenticated attacker with remote access could exploit this to gain filesystem access , with a HIGH confidentiality impact bu...

EUVD-2026-81572

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

CVE-2025-32463

🚨 PoC: CVE-2025-32463 – Vulnerabilidad de escape de chroot en Sudo Una vulnerabilidad crítica que afecta a versiones de sudo 1.9.0 a 1.9.17p1 , permitiendo a los usuarios escapar de chroot y obtener acceso al sistema de archivos raíz real. 📌 Descripción CVE-2025-32463 es una vulnerabilidad de...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

cve-2021-41773-exploration

Resumen CVE-2021-41773 es una vulnerabilidad de path traversal descubierta en Apache HTTP Server 2.4.49 en octubre de 2021. La causa raíz fue una falla en la normalización adecuada de las secuencias de puntos terminadas en la URL antes de verificar si la ruta solicitada permanecía dentro de la ra...

CVE-2026-71182

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-71181

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-71182

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2026-71182

Dell Update Package Framework versions prior to 26.07.03 contain an Improper Link Resolution Before File Access (Link Following) vulnerability. A high-privileged local attacker with sufficient access could exploit this to gain filesystem access on the affected system. The attack requires local ac...